|
|
|
|
|
|
by dreen
2179 days ago
|
|
|
I work for a large media comp and this is exactly the reason we don't give editors access to GTM (or even all developers), nor do we allow tools such as Optimizely intended for A/B testing, and we went away from letting them paste HTML into articles to include custom elements. Unfortunately, we still have lots of 3rd party stuff in GTM, and technically any ad can run random js on our sites. Thats where most problems come from these days. Editors still technically have the power to brick a given site through our old inhouse CMS which has no proper access control levels, hopefully not for long... |
|
|
If you configure your ad network to run all ads cross-domain, then they are very limited. For example, in GPT (which I work on) you call "googletag.pubads().setForceSafeFrame(true)".
(Disclosure: speaking only for myself)